[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.213' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 138.402412][ T1979] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 138.972608][ T1979] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 138.981833][ T1979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.990426][ T1979] usb 1-1: Product: syz [ 138.994916][ T1979] usb 1-1: Manufacturer: syz [ 138.999558][ T1979] usb 1-1: SerialNumber: syz [ 139.044207][ T1979] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 139.692850][ T8231] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 139.912407][ C0] ===================================================== [ 139.919362][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x28c/0x1f60 [ 139.926858][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.12.0-rc6-syzkaller #0 [ 139.934835][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 139.944902][ C0] Call Trace: [ 139.948174][ C0] [ 139.951004][ C0] dump_stack+0x24c/0x2e0 [ 139.955693][ C0] kmsan_report+0xfb/0x1e0 [ 139.960108][ C0] __msan_warning+0x5c/0xa0 [ 139.964852][ C0] ath9k_htc_rx_msg+0x28c/0x1f60 [ 139.969828][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 139.975894][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 139.981186][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 139.987337][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 139.993180][ C0] ? kmsan_get_metadata+0x116/0x180 [ 139.998377][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.004169][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 140.010052][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 140.015421][ C0] ? kmsan_get_metadata+0x116/0x180 [ 140.020628][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 140.025823][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.031646][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 140.039270][ C0] dummy_timer+0xda7/0x74f0 [ 140.043778][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 140.049849][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 140.055073][ C0] call_timer_fn+0x7d/0x450 [ 140.059569][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.065378][ C0] expire_timers+0x328/0x6c0 [ 140.069975][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 140.075162][ C0] __run_timers+0x624/0x9e0 [ 140.079679][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 140.085824][ C0] ? irqtime_account_irq+0xe3/0x380 [ 140.091012][ C0] ? kmsan_get_metadata+0x116/0x180 [ 140.096308][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 140.101526][ C0] run_timer_softirq+0x2d/0x50 [ 140.106522][ C0] __do_softirq+0x1b9/0x715 [ 140.111033][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.116969][ C0] __irq_exit_rcu+0x22f/0x280 [ 140.121640][ C0] irq_exit_rcu+0xe/0x10 [ 140.125878][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 140.131690][ C0] [ 140.134733][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 140.140709][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 140.146269][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 140.165880][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 140.171942][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 140.179899][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 140.187878][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 140.195902][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 140.203866][ C0] R13: ffff888104afdc64 R14: 0000000000000000 R15: ffffffff91631ac8 [ 140.211830][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 140.216764][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 140.222064][ C0] cpuidle_enter_state+0x99e/0x1750 [ 140.227307][ C0] ? kmsan_get_metadata+0x116/0x180 [ 140.232502][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 140.238133][ C0] cpuidle_enter+0xe3/0x170 [ 140.242633][ C0] do_idle+0x5df/0x790 [ 140.246722][ C0] cpu_startup_entry+0x45/0x50 [ 140.251475][ C0] rest_init+0x1c8/0x1f0 [ 140.255722][ C0] arch_call_rest_init+0x13/0x15 [ 140.260652][ C0] start_kernel+0xa17/0xbd8 [ 140.265146][ C0] x86_64_start_reservations+0x2a/0x2c [ 140.270637][ C0] x86_64_start_kernel+0x86/0x89 [ 140.275571][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 140.281469][ C0] [ 140.283783][ C0] Uninit was created at: [ 140.288002][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 140.293714][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 140.298398][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 140.304381][ C0] __alloc_skb+0x4dd/0xe90 [ 140.308798][ C0] __netdev_alloc_skb+0x45d/0x810 [ 140.313848][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 140.319073][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 140.324437][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 140.329654][ C0] dummy_timer+0xda7/0x74f0 [ 140.334181][ C0] call_timer_fn+0x7d/0x450 [ 140.338680][ C0] expire_timers+0x328/0x6c0 [ 140.343265][ C0] __run_timers+0x624/0x9e0 [ 140.347762][ C0] run_timer_softirq+0x2d/0x50 [ 140.352514][ C0] __do_softirq+0x1b9/0x715 [ 140.357136][ C0] ===================================================== [ 140.364049][ C0] Disabling lock debugging due to kernel taint [ 140.370265][ C0] ===================================================== [ 140.377177][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x4c0/0x1f60 [ 140.384517][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 140.394139][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 140.404180][ C0] Call Trace: [ 140.407462][ C0] [ 140.410302][ C0] dump_stack+0x24c/0x2e0 [ 140.414629][ C0] kmsan_report+0xfb/0x1e0 [ 140.419052][ C0] __msan_warning+0x5c/0xa0 [ 140.423543][ C0] ath9k_htc_rx_msg+0x4c0/0x1f60 [ 140.428470][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 140.434525][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 140.439820][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 140.445977][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 140.451783][ C0] ? kmsan_get_metadata+0x116/0x180 [ 140.456993][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.462784][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 140.468683][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 140.474048][ C0] ? kmsan_get_metadata+0x116/0x180 [ 140.479232][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 140.484434][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.490230][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 140.496398][ C0] dummy_timer+0xda7/0x74f0 [ 140.500916][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 140.506967][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 140.512155][ C0] call_timer_fn+0x7d/0x450 [ 140.516659][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.522471][ C0] expire_timers+0x328/0x6c0 [ 140.527050][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 140.532238][ C0] __run_timers+0x624/0x9e0 [ 140.536772][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 140.542915][ C0] ? irqtime_account_irq+0xe3/0x380 [ 140.548106][ C0] ? kmsan_get_metadata+0x116/0x180 [ 140.553306][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 140.558492][ C0] run_timer_softirq+0x2d/0x50 [ 140.563266][ C0] __do_softirq+0x1b9/0x715 [ 140.567760][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.573551][ C0] __irq_exit_rcu+0x22f/0x280 [ 140.578230][ C0] irq_exit_rcu+0xe/0x10 [ 140.582563][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 140.588192][ C0] [ 140.591112][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 140.597130][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 140.602669][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 140.622294][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 140.628378][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 140.636354][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 140.644319][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 140.652281][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 140.660254][ C0] R13: ffff888104afdc64 R14: 0000000000000000 R15: ffffffff91631ac8 [ 140.668218][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 140.673176][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 140.678449][ C0] cpuidle_enter_state+0x99e/0x1750 [ 140.683638][ C0] ? kmsan_get_metadata+0x116/0x180 [ 140.688828][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 140.694488][ C0] cpuidle_enter+0xe3/0x170 [ 140.698994][ C0] do_idle+0x5df/0x790 [ 140.703075][ C0] cpu_startup_entry+0x45/0x50 [ 140.707830][ C0] rest_init+0x1c8/0x1f0 [ 140.712060][ C0] arch_call_rest_init+0x13/0x15 [ 140.716988][ C0] start_kernel+0xa17/0xbd8 [ 140.721497][ C0] x86_64_start_reservations+0x2a/0x2c [ 140.726950][ C0] x86_64_start_kernel+0x86/0x89 [ 140.731887][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 140.737771][ C0] [ 140.740080][ C0] Uninit was created at: [ 140.744295][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 140.750009][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 140.754670][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 140.760550][ C0] __alloc_skb+0x4dd/0xe90 [ 140.764954][ C0] __netdev_alloc_skb+0x45d/0x810 [ 140.769983][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 140.775174][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 140.780557][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 140.785826][ C0] dummy_timer+0xda7/0x74f0 [ 140.790331][ C0] call_timer_fn+0x7d/0x450 [ 140.794833][ C0] expire_timers+0x328/0x6c0 [ 140.799426][ C0] __run_timers+0x624/0x9e0 [ 140.804035][ C0] run_timer_softirq+0x2d/0x50 [ 140.808828][ C0] __do_softirq+0x1b9/0x715 [ 140.813327][ C0] ===================================================== [ 140.820272][ C0] ===================================================== [ 140.827186][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x7b8/0x1f60 [ 140.834540][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 140.843908][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 140.853966][ C0] Call Trace: [ 140.857232][ C0] [ 140.860074][ C0] dump_stack+0x24c/0x2e0 [ 140.864397][ C0] kmsan_report+0xfb/0x1e0 [ 140.868818][ C0] __msan_warning+0x5c/0xa0 [ 140.873306][ C0] ath9k_htc_rx_msg+0x7b8/0x1f60 [ 140.878236][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 140.884291][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 140.889574][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 140.895736][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 140.901553][ C0] ? kmsan_get_metadata+0x116/0x180 [ 140.906743][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.912537][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 140.918418][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 140.923779][ C0] ? kmsan_get_metadata+0x116/0x180 [ 140.928970][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 140.934156][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.939950][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 140.946106][ C0] dummy_timer+0xda7/0x74f0 [ 140.950608][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 140.956658][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 140.961849][ C0] call_timer_fn+0x7d/0x450 [ 140.966365][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.972159][ C0] expire_timers+0x328/0x6c0 [ 140.976765][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 140.981953][ C0] __run_timers+0x624/0x9e0 [ 140.986447][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 140.992597][ C0] ? irqtime_account_irq+0xe3/0x380 [ 140.997805][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.002991][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 141.008192][ C0] run_timer_softirq+0x2d/0x50 [ 141.012944][ C0] __do_softirq+0x1b9/0x715 [ 141.017436][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.023241][ C0] __irq_exit_rcu+0x22f/0x280 [ 141.027909][ C0] irq_exit_rcu+0xe/0x10 [ 141.032140][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 141.037769][ C0] [ 141.040692][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 141.046694][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 141.052249][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 141.072246][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 141.078343][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 141.086311][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.094984][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 141.103167][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 141.111140][ C0] R13: ffff888104afdc64 R14: 0000000000000000 R15: ffffffff91631ac8 [ 141.119105][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 141.124739][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 141.130018][ C0] cpuidle_enter_state+0x99e/0x1750 [ 141.135215][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.140405][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 141.146028][ C0] cpuidle_enter+0xe3/0x170 [ 141.150523][ C0] do_idle+0x5df/0x790 [ 141.154586][ C0] cpu_startup_entry+0x45/0x50 [ 141.159342][ C0] rest_init+0x1c8/0x1f0 [ 141.163572][ C0] arch_call_rest_init+0x13/0x15 [ 141.168502][ C0] start_kernel+0xa17/0xbd8 [ 141.173342][ C0] x86_64_start_reservations+0x2a/0x2c [ 141.179316][ C0] x86_64_start_kernel+0x86/0x89 [ 141.184245][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 141.190132][ C0] [ 141.192441][ C0] Uninit was created at: [ 141.196658][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 141.202373][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 141.207059][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 141.212954][ C0] __alloc_skb+0x4dd/0xe90 [ 141.217381][ C0] __netdev_alloc_skb+0x45d/0x810 [ 141.222403][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 141.227597][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.232983][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.238179][ C0] dummy_timer+0xda7/0x74f0 [ 141.242675][ C0] call_timer_fn+0x7d/0x450 [ 141.247175][ C0] expire_timers+0x328/0x6c0 [ 141.251765][ C0] __run_timers+0x624/0x9e0 [ 141.256263][ C0] run_timer_softirq+0x2d/0x50 [ 141.261026][ C0] __do_softirq+0x1b9/0x715 [ 141.265584][ C0] ===================================================== [ 141.272497][ C0] ===================================================== [ 141.279411][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x80c/0x1f60 [ 141.286705][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 141.296188][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.306238][ C0] Call Trace: [ 141.309589][ C0] [ 141.312429][ C0] dump_stack+0x24c/0x2e0 [ 141.316785][ C0] kmsan_report+0xfb/0x1e0 [ 141.321399][ C0] __msan_warning+0x5c/0xa0 [ 141.325975][ C0] ath9k_htc_rx_msg+0x80c/0x1f60 [ 141.330939][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 141.337180][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 141.342583][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.348734][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 141.354539][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.359736][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.365549][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 141.371472][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.376849][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.382046][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.387760][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.393666][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.399815][ C0] dummy_timer+0xda7/0x74f0 [ 141.404332][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 141.410402][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.415707][ C0] call_timer_fn+0x7d/0x450 [ 141.420356][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.426186][ C0] expire_timers+0x328/0x6c0 [ 141.430780][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.435979][ C0] __run_timers+0x624/0x9e0 [ 141.440529][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 141.446717][ C0] ? irqtime_account_irq+0xe3/0x380 [ 141.451912][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.457106][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 141.462315][ C0] run_timer_softirq+0x2d/0x50 [ 141.467101][ C0] __do_softirq+0x1b9/0x715 [ 141.471630][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.477431][ C0] __irq_exit_rcu+0x22f/0x280 [ 141.482105][ C0] irq_exit_rcu+0xe/0x10 [ 141.486357][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 141.491989][ C0] [ 141.494917][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 141.500919][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 141.506460][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 141.526075][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 141.532132][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 141.540349][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.548307][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 141.556265][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 141.564223][ C0] R13: ffff888104afdc64 R14: 0000000000000000 R15: ffffffff91631ac8 [ 141.572444][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 141.577378][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 141.582655][ C0] cpuidle_enter_state+0x99e/0x1750 [ 141.587849][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.593037][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 141.598662][ C0] cpuidle_enter+0xe3/0x170 [ 141.603168][ C0] do_idle+0x5df/0x790 [ 141.607255][ C0] cpu_startup_entry+0x45/0x50 [ 141.612055][ C0] rest_init+0x1c8/0x1f0 [ 141.616399][ C0] arch_call_rest_init+0x13/0x15 [ 141.621331][ C0] start_kernel+0xa17/0xbd8 [ 141.625848][ C0] x86_64_start_reservations+0x2a/0x2c [ 141.631316][ C0] x86_64_start_kernel+0x86/0x89 [ 141.636269][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 141.642158][ C0] [ 141.644470][ C0] Uninit was created at: [ 141.648710][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 141.654424][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 141.659107][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 141.664991][ C0] __alloc_skb+0x4dd/0xe90 [ 141.669392][ C0] __netdev_alloc_skb+0x45d/0x810 [ 141.674411][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 141.679599][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.684964][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.690176][ C0] dummy_timer+0xda7/0x74f0 [ 141.694774][ C0] call_timer_fn+0x7d/0x450 [ 141.699305][ C0] expire_timers+0x328/0x6c0 [ 141.703898][ C0] __run_timers+0x624/0x9e0 [ 141.708397][ C0] run_timer_softirq+0x2d/0x50 [ 141.713300][ C0] __do_softirq+0x1b9/0x715 [ 141.717798][ C0] ===================================================== [ 141.724774][ C0] ===================================================== [ 141.731690][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x96f/0x1f60 [ 141.739023][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 141.748384][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.758477][ C0] Call Trace: [ 141.761746][ C0] [ 141.765271][ C0] dump_stack+0x24c/0x2e0 [ 141.769707][ C0] kmsan_report+0xfb/0x1e0 [ 141.774124][ C0] __msan_warning+0x5c/0xa0 [ 141.778624][ C0] ath9k_htc_rx_msg+0x96f/0x1f60 [ 141.783584][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 141.789647][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 141.794933][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.801083][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 141.806887][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.812082][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.817888][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 141.823781][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.829205][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.834402][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.839612][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.846453][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.852696][ C0] dummy_timer+0xda7/0x74f0 [ 141.857228][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 141.863314][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.868528][ C0] call_timer_fn+0x7d/0x450 [ 141.873023][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.878819][ C0] expire_timers+0x328/0x6c0 [ 141.883436][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.888644][ C0] __run_timers+0x624/0x9e0 [ 141.893148][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 141.899321][ C0] ? irqtime_account_irq+0xe3/0x380 [ 141.904522][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.909708][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 141.914895][ C0] run_timer_softirq+0x2d/0x50 [ 141.919666][ C0] __do_softirq+0x1b9/0x715 [ 141.924193][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.930884][ C0] __irq_exit_rcu+0x22f/0x280 [ 141.935572][ C0] irq_exit_rcu+0xe/0x10 [ 141.939893][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 141.945519][ C0] [ 141.948439][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 141.954436][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 141.959977][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 141.979597][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 141.985665][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 141.993626][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.001587][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 142.009551][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 142.017611][ C0] R13: ffff888104afdc64 R14: 0000000000000000 R15: ffffffff91631ac8 [ 142.025584][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 142.030544][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 142.035832][ C0] cpuidle_enter_state+0x99e/0x1750 [ 142.041028][ C0] ? kmsan_get_metadata+0x116/0x180 [ 142.046226][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 142.051879][ C0] cpuidle_enter+0xe3/0x170 [ 142.056372][ C0] do_idle+0x5df/0x790 [ 142.060441][ C0] cpu_startup_entry+0x45/0x50 [ 142.065196][ C0] rest_init+0x1c8/0x1f0 [ 142.071250][ C0] arch_call_rest_init+0x13/0x15 [ 142.076182][ C0] start_kernel+0xa17/0xbd8 [ 142.080735][ C0] x86_64_start_reservations+0x2a/0x2c [ 142.086240][ C0] x86_64_start_kernel+0x86/0x89 [ 142.091227][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 142.097248][ C0] [ 142.099563][ C0] Uninit was created at: [ 142.103874][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 142.109632][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 142.114332][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 142.120261][ C0] __alloc_skb+0x4dd/0xe90 [ 142.124668][ C0] __netdev_alloc_skb+0x45d/0x810 [ 142.129723][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 142.134914][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 142.140273][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 142.145460][ C0] dummy_timer+0xda7/0x74f0 [ 142.149968][ C0] call_timer_fn+0x7d/0x450 [ 142.154486][ C0] expire_timers+0x328/0x6c0 [ 142.159075][ C0] __run_timers+0x624/0x9e0 [ 142.163566][ C0] run_timer_softirq+0x2d/0x50 [ 142.168350][ C0] __do_softirq+0x1b9/0x715 [ 142.172888][ C0] ===================================================== [ 142.179879][ C0] ===================================================== [ 142.186806][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x28c/0x1f60 [ 142.194113][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 142.203466][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 142.213514][ C0] Call Trace: [ 142.216836][ C0] [ 142.219688][ C0] dump_stack+0x24c/0x2e0 [ 142.224116][ C0] kmsan_report+0xfb/0x1e0 [ 142.228522][ C0] __msan_warning+0x5c/0xa0 [ 142.233019][ C0] ath9k_htc_rx_msg+0x28c/0x1f60 [ 142.237961][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 142.244016][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 142.249421][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 142.255570][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 142.261389][ C0] ? kmsan_get_metadata+0x116/0x180 [ 142.266594][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 142.272435][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 142.278531][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 142.283906][ C0] ? kmsan_get_metadata+0x116/0x180 [ 142.289128][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 142.294324][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 142.300140][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 142.306283][ C0] dummy_timer+0xda7/0x74f0 [ 142.310930][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 142.316983][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 142.322230][ C0] call_timer_fn+0x7d/0x450 [ 142.326753][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 142.332559][ C0] expire_timers+0x328/0x6c0 [ 142.337175][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 142.342396][ C0] __run_timers+0x624/0x9e0 [ 142.346894][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 142.353033][ C0] ? irqtime_account_irq+0xe3/0x380 [ 142.358222][ C0] ? kmsan_get_metadata+0x116/0x180 [ 142.363407][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 142.368595][ C0] run_timer_softirq+0x2d/0x50 [ 142.373444][ C0] __do_softirq+0x1b9/0x715 [ 142.377953][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 142.383748][ C0] __irq_exit_rcu+0x22f/0x280 [ 142.388436][ C0] irq_exit_rcu+0xe/0x10 [ 142.392667][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 142.398298][ C0] [ 142.401226][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 142.407296][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 142.412830][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 142.432422][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 142.438482][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 142.446453][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.454433][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 142.462388][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 142.470343][ C0] R13: ffff888104afdc64 R14: 0000000000000000 R15: ffffffff91631ac8 [ 142.478320][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 142.483274][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 142.488574][ C0] cpuidle_enter_state+0x99e/0x1750 [ 142.493759][ C0] ? kmsan_get_metadata+0x116/0x180 [ 142.498968][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 142.504590][ C0] cpuidle_enter+0xe3/0x170 [ 142.509081][ C0] do_idle+0x5df/0x790 [ 142.513146][ C0] cpu_startup_entry+0x45/0x50 [ 142.517928][ C0] rest_init+0x1c8/0x1f0 [ 142.522159][ C0] arch_call_rest_init+0x13/0x15 [ 142.527095][ C0] start_kernel+0xa17/0xbd8 [ 142.531595][ C0] x86_64_start_reservations+0x2a/0x2c [ 142.537076][ C0] x86_64_start_kernel+0x86/0x89 [ 142.542010][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 142.547896][ C0] [ 142.550202][ C0] Uninit was created at: [ 142.554593][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 142.560336][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 142.565037][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 142.570921][ C0] __alloc_skb+0x4dd/0xe90 [ 142.575323][ C0] __netdev_alloc_skb+0x45d/0x810 [ 142.580332][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 142.585535][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 142.590920][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 142.596101][ C0] dummy_timer+0xda7/0x74f0 [ 142.600590][ C0] call_timer_fn+0x7d/0x450 [ 142.605082][ C0] expire_timers+0x328/0x6c0 [ 142.609694][ C0] __run_timers+0x624/0x9e0 [ 142.614210][ C0] run_timer_softirq+0x2d/0x50 [ 142.618987][ C0] __do_softirq+0x1b9/0x715 [ 142.623479][ C0] ===================================================== [ 142.630410][ C0] ===================================================== [ 142.637337][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x4c0/0x1f60 [ 142.644627][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 142.653977][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 142.664020][ C0] Call Trace: [ 142.667287][ C0] [ 142.670116][ C0] dump_stack+0x24c/0x2e0 [ 142.674437][ C0] kmsan_report+0xfb/0x1e0 [ 142.678842][ C0] __msan_warning+0x5c/0xa0 [ 142.683336][ C0] ath9k_htc_rx_msg+0x4c0/0x1f60 [ 142.688324][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 142.694396][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 142.699938][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 142.706080][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 142.711972][ C0] ? kmsan_get_metadata+0x116/0x180 [ 142.717186][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 142.723082][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 142.728971][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 142.734334][ C0] ? kmsan_get_metadata+0x116/0x180 [ 142.739620][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 142.744848][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 142.750647][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 142.756788][ C0] dummy_timer+0xda7/0x74f0 [ 142.761290][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 142.767346][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 142.772558][ C0] call_timer_fn+0x7d/0x450 [ 142.777139][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 142.782934][ C0] expire_timers+0x328/0x6c0 [ 142.787517][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 142.792745][ C0] __run_timers+0x624/0x9e0 [ 142.797247][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 142.803417][ C0] ? irqtime_account_irq+0xe3/0x380 [ 142.808605][ C0] ? kmsan_get_metadata+0x116/0x180 [ 142.813814][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 142.819018][ C0] run_timer_softirq+0x2d/0x50 [ 142.823775][ C0] __do_softirq+0x1b9/0x715 [ 142.828315][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 142.834154][ C0] __irq_exit_rcu+0x22f/0x280 [ 142.838837][ C0] irq_exit_rcu+0xe/0x10 [ 142.843069][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 142.848693][ C0] [ 142.851608][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 142.857574][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 142.863107][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 142.885217][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 142.891272][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 142.899233][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.907212][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 142.915170][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 142.923143][ C0] R13: ffff888104afdc64 R14: 0000000000000000 R15: ffffffff91631ac8 [ 142.931101][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 142.936032][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 142.941319][ C0] cpuidle_enter_state+0x99e/0x1750 [ 142.946516][ C0] ? kmsan_get_metadata+0x116/0x180 [ 142.951704][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 142.957326][ C0] cpuidle_enter+0xe3/0x170 [ 142.961833][ C0] do_idle+0x5df/0x790 [ 142.965892][ C0] cpu_startup_entry+0x45/0x50 [ 142.970669][ C0] rest_init+0x1c8/0x1f0 [ 142.974897][ C0] arch_call_rest_init+0x13/0x15 [ 142.979837][ C0] start_kernel+0xa17/0xbd8 [ 142.984329][ C0] x86_64_start_reservations+0x2a/0x2c [ 142.989797][ C0] x86_64_start_kernel+0x86/0x89 [ 142.994721][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 143.000604][ C0] [ 143.002909][ C0] Uninit was created at: [ 143.007124][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 143.012844][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 143.017519][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 143.023398][ C0] __alloc_skb+0x4dd/0xe90 [ 143.027816][ C0] __netdev_alloc_skb+0x45d/0x810 [ 143.032823][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 143.038079][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 143.043436][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 143.049229][ C0] dummy_timer+0xda7/0x74f0 [ 143.053807][ C0] call_timer_fn+0x7d/0x450 [ 143.058308][ C0] expire_timers+0x328/0x6c0 [ 143.062892][ C0] __run_timers+0x624/0x9e0 [ 143.067511][ C0] run_timer_softirq+0x2d/0x50 [ 143.072308][ C0] __do_softirq+0x1b9/0x715 [ 143.076835][ C0] ===================================================== [ 143.083839][ C0] ===================================================== [ 143.090774][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x7b8/0x1f60 [ 143.098106][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 143.107461][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 143.118318][ C0] Call Trace: [ 143.121948][ C0] [ 143.124808][ C0] dump_stack+0x24c/0x2e0 [ 143.129145][ C0] kmsan_report+0xfb/0x1e0 [ 143.133561][ C0] __msan_warning+0x5c/0xa0 [ 143.138065][ C0] ath9k_htc_rx_msg+0x7b8/0x1f60 [ 143.143028][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 143.149812][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 143.155271][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 143.161416][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 143.167215][ C0] ? kmsan_get_metadata+0x116/0x180 [ 143.172400][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 143.178198][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 143.184083][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 143.189447][ C0] ? kmsan_get_metadata+0x116/0x180 [ 143.194633][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 143.199820][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 143.205618][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 143.211784][ C0] dummy_timer+0xda7/0x74f0 [ 143.216315][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 143.222371][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 143.227561][ C0] call_timer_fn+0x7d/0x450 [ 143.232077][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 143.237877][ C0] expire_timers+0x328/0x6c0 [ 143.242468][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 143.247663][ C0] __run_timers+0x624/0x9e0 [ 143.252196][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 143.258710][ C0] ? irqtime_account_irq+0xe3/0x380 [ 143.263994][ C0] ? kmsan_get_metadata+0x116/0x180 [ 143.269198][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 143.274482][ C0] run_timer_softirq+0x2d/0x50 [ 143.279312][ C0] __do_softirq+0x1b9/0x715 [ 143.283817][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 143.289662][ C0] __irq_exit_rcu+0x22f/0x280 [ 143.294337][ C0] irq_exit_rcu+0xe/0x10 [ 143.298720][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 143.304347][ C0] [ 143.307274][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 143.313242][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 143.318884][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 143.338718][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 143.344956][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 143.354663][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.362628][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 143.370591][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 143.378569][ C0] R13: ffff888104afdc64 R14: 0000000000000000 R15: ffffffff91631ac8 [ 143.386530][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 143.391462][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 143.396732][ C0] cpuidle_enter_state+0x99e/0x1750 [ 143.401934][ C0] ? kmsan_get_metadata+0x116/0x180 [ 143.407120][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 143.412741][ C0] cpuidle_enter+0xe3/0x170 [ 143.417231][ C0] do_idle+0x5df/0x790 [ 143.421288][ C0] cpu_startup_entry+0x45/0x50 [ 143.426043][ C0] rest_init+0x1c8/0x1f0 [ 143.430269][ C0] arch_call_rest_init+0x13/0x15 [ 143.435911][ C0] start_kernel+0xa17/0xbd8 [ 143.440491][ C0] x86_64_start_reservations+0x2a/0x2c [ 143.445949][ C0] x86_64_start_kernel+0x86/0x89 [ 143.450872][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 143.456755][ C0] [ 143.459083][ C0] Uninit was created at: [ 143.463297][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 143.469012][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 143.473700][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 143.479582][ C0] __alloc_skb+0x4dd/0xe90 [ 143.483981][ C0] __netdev_alloc_skb+0x45d/0x810 [ 143.488990][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 143.494180][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 143.499536][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 143.504718][ C0] dummy_timer+0xda7/0x74f0 [ 143.509205][ C0] call_timer_fn+0x7d/0x450 [ 143.513694][ C0] expire_timers+0x328/0x6c0 [ 143.518270][ C0] __run_timers+0x624/0x9e0 [ 143.522759][ C0] run_timer_softirq+0x2d/0x50 [ 143.527507][ C0] __do_softirq+0x1b9/0x715 [ 143.531993][ C0] ===================================================== [ 143.538901][ C0] ===================================================== [ 143.545819][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x80c/0x1f60 [ 143.553527][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 143.562953][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 143.573043][ C0] Call Trace: [ 143.576365][ C0] [ 143.579350][ C0] dump_stack+0x24c/0x2e0 [ 143.583690][ C0] kmsan_report+0xfb/0x1e0 [ 143.588099][ C0] __msan_warning+0x5c/0xa0 [ 143.592635][ C0] ath9k_htc_rx_msg+0x80c/0x1f60 [ 143.597656][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 143.603720][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 143.609002][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 143.615149][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 143.620950][ C0] ? kmsan_get_metadata+0x116/0x180 [ 143.626132][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 143.631922][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 143.638587][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 143.643949][ C0] ? kmsan_get_metadata+0x116/0x180 [ 143.649134][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 143.654927][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 143.660723][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 143.666861][ C0] dummy_timer+0xda7/0x74f0 [ 143.671535][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 143.677586][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 143.682773][ C0] call_timer_fn+0x7d/0x450 [ 143.687268][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 143.693080][ C0] expire_timers+0x328/0x6c0 [ 143.697662][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 143.702847][ C0] __run_timers+0x624/0x9e0 [ 143.707368][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 143.713623][ C0] ? irqtime_account_irq+0xe3/0x380 [ 143.718825][ C0] ? kmsan_get_metadata+0x116/0x180 [ 143.724008][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 143.729198][ C0] run_timer_softirq+0x2d/0x50 [ 143.734574][ C0] __do_softirq+0x1b9/0x715 [ 143.739086][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 143.744876][ C0] __irq_exit_rcu+0x22f/0x280 [ 143.749539][ C0] irq_exit_rcu+0xe/0x10 [ 143.753765][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 143.759388][ C0] [ 143.762311][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 143.768298][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 143.774104][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 143.793901][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 143.799961][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 143.807916][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.815880][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 143.823868][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 143.831827][ C0] R13: ffff888104afdc64 R14: 0000000000000000 R15: ffffffff91631ac8 [ 143.839788][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 143.844726][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 143.849999][ C0] cpuidle_enter_state+0x99e/0x1750 [ 143.855202][ C0] ? kmsan_get_metadata+0x116/0x180 [ 143.860390][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 143.866010][ C0] cpuidle_enter+0xe3/0x170 [ 143.870521][ C0] do_idle+0x5df/0x790 [ 143.874580][ C0] cpu_startup_entry+0x45/0x50 [ 143.879367][ C0] rest_init+0x1c8/0x1f0 [ 143.883613][ C0] arch_call_rest_init+0x13/0x15 [ 143.888551][ C0] start_kernel+0xa17/0xbd8 [ 143.893041][ C0] x86_64_start_reservations+0x2a/0x2c [ 143.898488][ C0] x86_64_start_kernel+0x86/0x89 [ 143.903430][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 143.909314][ C0] [ 143.911618][ C0] Uninit was created at: [ 143.915848][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 143.921561][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 143.926222][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 143.932101][ C0] __alloc_skb+0x4dd/0xe90 [ 143.936500][ C0] __netdev_alloc_skb+0x45d/0x810 [ 143.941594][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 143.946864][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 143.952230][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 143.957435][ C0] dummy_timer+0xda7/0x74f0 [ 143.963161][ C0] call_timer_fn+0x7d/0x450 [ 143.967775][ C0] expire_timers+0x328/0x6c0 [ 143.972368][ C0] __run_timers+0x624/0x9e0 [ 143.976888][ C0] run_timer_softirq+0x2d/0x50 [ 143.981745][ C0] __do_softirq+0x1b9/0x715 [ 143.986328][ C0] ===================================================== [ 143.993242][ C0] ===================================================== [ 144.000168][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x96f/0x1f60 [ 144.007974][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 144.017326][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 144.027388][ C0] Call Trace: [ 144.030707][ C0] [ 144.033543][ C0] dump_stack+0x24c/0x2e0 [ 144.037871][ C0] kmsan_report+0xfb/0x1e0 [ 144.042286][ C0] __msan_warning+0x5c/0xa0 [ 144.046870][ C0] ath9k_htc_rx_msg+0x96f/0x1f60 [ 144.051802][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 144.057872][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 144.063167][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 144.069310][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 144.075112][ C0] ? kmsan_get_metadata+0x116/0x180 [ 144.080323][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.086204][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 144.092098][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 144.097465][ C0] ? kmsan_get_metadata+0x116/0x180 [ 144.102755][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 144.107943][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.113741][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 144.119891][ C0] dummy_timer+0xda7/0x74f0 [ 144.124410][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 144.130495][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 144.135678][ C0] call_timer_fn+0x7d/0x450 [ 144.140172][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.145969][ C0] expire_timers+0x328/0x6c0 [ 144.150548][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 144.155731][ C0] __run_timers+0x624/0x9e0 [ 144.160239][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 144.166377][ C0] ? irqtime_account_irq+0xe3/0x380 [ 144.171566][ C0] ? kmsan_get_metadata+0x116/0x180 [ 144.176835][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 144.182021][ C0] run_timer_softirq+0x2d/0x50 [ 144.186777][ C0] __do_softirq+0x1b9/0x715 [ 144.191324][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.197137][ C0] __irq_exit_rcu+0x22f/0x280 [ 144.201812][ C0] irq_exit_rcu+0xe/0x10 [ 144.206060][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 144.211689][ C0] [ 144.214607][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 144.220588][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 144.226142][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 144.245929][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 144.251979][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 144.259935][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 144.267894][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 144.275858][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 144.283821][ C0] R13: ffff888104afdc64 R14: 0000000000000000 R15: ffffffff91631ac8 [ 144.291781][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 144.296736][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 144.302034][ C0] cpuidle_enter_state+0x99e/0x1750 [ 144.307289][ C0] ? kmsan_get_metadata+0x116/0x180 [ 144.312496][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 144.318130][ C0] cpuidle_enter+0xe3/0x170 [ 144.322634][ C0] do_idle+0x5df/0x790 [ 144.326693][ C0] cpu_startup_entry+0x45/0x50 [ 144.331454][ C0] rest_init+0x1c8/0x1f0 [ 144.335678][ C0] arch_call_rest_init+0x13/0x15 [ 144.340601][ C0] start_kernel+0xa17/0xbd8 [ 144.345088][ C0] x86_64_start_reservations+0x2a/0x2c [ 144.350538][ C0] x86_64_start_kernel+0x86/0x89 [ 144.355458][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 144.361346][ C0] [ 144.363658][ C0] Uninit was created at: [ 144.367876][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 144.373594][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 144.378277][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 144.384188][ C0] __alloc_skb+0x4dd/0xe90 [ 144.388596][ C0] __netdev_alloc_skb+0x45d/0x810 [ 144.393637][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 144.398860][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 144.404240][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 144.409451][ C0] dummy_timer+0xda7/0x74f0 [ 144.413953][ C0] call_timer_fn+0x7d/0x450 [ 144.418472][ C0] expire_timers+0x328/0x6c0 [ 144.423070][ C0] __run_timers+0x624/0x9e0 [ 144.427560][ C0] run_timer_softirq+0x2d/0x50 [ 144.432317][ C0] __do_softirq+0x1b9/0x715 [ 144.436830][ C0] ===================================================== [ 144.444310][ C0] clocksource: timekeeping watchdog on CPU0: Marking clocksource 'tsc' as unstable because the skew is too large: [ 144.456537][ C0] clocksource: 'acpi_pm' wd_now: db344e wd_last: e8955c mask: ffffff [ 144.467090][ C0] clocksource: 'tsc' cs_now: 50def96bdf cs_last: 4e7e11cb36 mask: ffffffffffffffff executing program [ 144.478629][ C0] tsc: Marking TSC unstable due to clocksource watchdog [ 144.486738][ T1979] TSC found unstable after boot, most likely due to broken BIOS. Use 'tsc=unstable'. [ 144.496705][ T1979] sched_clock: Marking unstable (144544557433, -57827310)<-(144485069008, 1663447) [ 144.496730][ T8231] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 144.512334][ T3451] usb 1-1: USB disconnect, device number 2 [ 144.522481][ T8231] ath9k_htc: Failed to initialize the device [ 144.551164][ T8236] clocksource: Switched to clocksource acpi_pm [ 144.568910][ T3451] usb 1-1: ath9k_htc: USB layer deinitialized [ 144.942439][ T3451] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 145.462639][ T3451] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 145.473374][ T3451] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.481515][ T3451] usb 1-1: Product: syz [ 145.485941][ T3451] usb 1-1: Manufacturer: syz [ 145.490641][ T3451] usb 1-1: SerialNumber: syz [ 145.534014][ T3451] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 146.112607][ T18] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 146.322498][ C1] ===================================================== [ 146.329464][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x28c/0x1f60 [ 146.332290][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 146.332290][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.332290][ C1] Call Trace: [ 146.332290][ C1] [ 146.332290][ C1] dump_stack+0x24c/0x2e0 [ 146.332290][ C1] kmsan_report+0xfb/0x1e0 [ 146.332290][ C1] __msan_warning+0x5c/0xa0 [ 146.332290][ C1] ath9k_htc_rx_msg+0x28c/0x1f60 [ 146.332290][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 146.332290][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 146.332290][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.332290][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 146.332290][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.332290][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.332290][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 146.332290][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.332290][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.332290][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.332290][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.332290][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.332290][ C1] dummy_timer+0xda7/0x74f0 [ 146.332290][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.332290][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.332290][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 146.332290][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 146.332290][ C1] call_timer_fn+0x7d/0x450 [ 146.332290][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.332290][ C1] expire_timers+0x328/0x6c0 [ 146.332290][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 146.332290][ C1] __run_timers+0x624/0x9e0 [ 146.332290][ C1] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 146.332290][ C1] ? irqtime_account_irq+0x5e/0x380 [ 146.332290][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.517242][ T8231] usb 1-1: USB disconnect, device number 3 [ 146.516552][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 146.516552][ C1] run_timer_softirq+0x2d/0x50 [ 146.533570][ C1] __do_softirq+0x1b9/0x715 [ 146.533570][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.533570][ C1] __irq_exit_rcu+0x22f/0x280 [ 146.533570][ C1] irq_exit_rcu+0xe/0x10 [ 146.533570][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 146.533570][ C1] [ 146.533570][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 146.533570][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 146.533570][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 146.582884][ C1] RSP: 0018:ffff888101be3c40 EFLAGS: 00000246 [ 146.582884][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017d9f40 [ 146.582884][ C1] RDX: ffff888101bd9f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.582884][ C1] RBP: ffff888101be3cd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 146.582884][ C1] R10: 0000000000000002 R11: ffff888101bd9f40 R12: 0000000000000000 [ 146.582884][ C1] R13: ffff888104afe064 R14: 0000000000000000 R15: ffff888101bda9c8 [ 146.582884][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 146.582884][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 146.582884][ C1] cpuidle_enter_state+0x99e/0x1750 [ 146.582884][ C1] cpuidle_enter+0xe3/0x170 [ 146.582884][ C1] do_idle+0x5df/0x790 [ 146.582884][ C1] cpu_startup_entry+0x45/0x50 [ 146.582884][ C1] ? setup_APIC_timer+0x210/0x210 [ 146.582884][ C1] start_secondary+0xe9/0xf0 [ 146.582884][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 146.582884][ C1] [ 146.582884][ C1] Uninit was created at: [ 146.582884][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 146.582884][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 146.582884][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 146.582884][ C1] __alloc_skb+0x4dd/0xe90 [ 146.582884][ C1] __netdev_alloc_skb+0x45d/0x810 [ 146.582884][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 146.582884][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.582884][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.582884][ C1] dummy_timer+0xda7/0x74f0 [ 146.582884][ C1] call_timer_fn+0x7d/0x450 [ 146.582884][ C1] expire_timers+0x328/0x6c0 [ 146.582884][ C1] __run_timers+0x624/0x9e0 [ 146.582884][ C1] run_timer_softirq+0x2d/0x50 [ 146.582884][ C1] __do_softirq+0x1b9/0x715 [ 146.582884][ C1] ===================================================== [ 146.582884][ C1] ===================================================== [ 146.582884][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x4c0/0x1f60 [ 146.582884][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 146.582884][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.582884][ C1] Call Trace: [ 146.582884][ C1] [ 146.582884][ C1] dump_stack+0x24c/0x2e0 [ 146.582884][ C1] kmsan_report+0xfb/0x1e0 [ 146.582884][ C1] __msan_warning+0x5c/0xa0 [ 146.582884][ C1] ath9k_htc_rx_msg+0x4c0/0x1f60 [ 146.582884][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 146.582884][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 146.582884][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.582884][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.582884][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 146.582884][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.582884][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.582884][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.582884][ C1] dummy_timer+0xda7/0x74f0 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 146.582884][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 146.582884][ C1] call_timer_fn+0x7d/0x450 [ 146.582884][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.582884][ C1] expire_timers+0x328/0x6c0 [ 146.582884][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 146.582884][ C1] __run_timers+0x624/0x9e0 [ 146.582884][ C1] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 146.582884][ C1] ? irqtime_account_irq+0x5e/0x380 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 146.582884][ C1] run_timer_softirq+0x2d/0x50 [ 146.582884][ C1] __do_softirq+0x1b9/0x715 [ 146.582884][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.582884][ C1] __irq_exit_rcu+0x22f/0x280 [ 146.582884][ C1] irq_exit_rcu+0xe/0x10 [ 146.582884][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 146.582884][ C1] [ 146.582884][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 146.582884][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 146.582884][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 146.582884][ C1] RSP: 0018:ffff888101be3c40 EFLAGS: 00000246 [ 146.582884][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017d9f40 [ 146.582884][ C1] RDX: ffff888101bd9f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.582884][ C1] RBP: ffff888101be3cd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 146.582884][ C1] R10: 0000000000000002 R11: ffff888101bd9f40 R12: 0000000000000000 [ 146.582884][ C1] R13: ffff888104afe064 R14: 0000000000000000 R15: ffff888101bda9c8 [ 146.582884][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 146.582884][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 146.582884][ C1] cpuidle_enter_state+0x99e/0x1750 [ 146.582884][ C1] cpuidle_enter+0xe3/0x170 [ 146.582884][ C1] do_idle+0x5df/0x790 [ 146.582884][ C1] cpu_startup_entry+0x45/0x50 [ 146.582884][ C1] ? setup_APIC_timer+0x210/0x210 [ 146.582884][ C1] start_secondary+0xe9/0xf0 [ 146.582884][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 146.582884][ C1] [ 146.582884][ C1] Uninit was created at: [ 146.582884][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 146.582884][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 146.582884][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 146.582884][ C1] __alloc_skb+0x4dd/0xe90 [ 146.582884][ C1] __netdev_alloc_skb+0x45d/0x810 [ 146.582884][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 146.582884][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.582884][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.582884][ C1] dummy_timer+0xda7/0x74f0 [ 146.582884][ C1] call_timer_fn+0x7d/0x450 [ 146.582884][ C1] expire_timers+0x328/0x6c0 [ 146.582884][ C1] __run_timers+0x624/0x9e0 [ 146.582884][ C1] run_timer_softirq+0x2d/0x50 [ 146.582884][ C1] __do_softirq+0x1b9/0x715 [ 146.582884][ C1] ===================================================== [ 146.582884][ C1] ===================================================== [ 146.582884][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x7b8/0x1f60 [ 146.582884][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 146.582884][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.582884][ C1] Call Trace: [ 146.582884][ C1] [ 146.582884][ C1] dump_stack+0x24c/0x2e0 [ 146.582884][ C1] kmsan_report+0xfb/0x1e0 [ 146.582884][ C1] __msan_warning+0x5c/0xa0 [ 146.582884][ C1] ath9k_htc_rx_msg+0x7b8/0x1f60 [ 146.582884][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 146.582884][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 146.582884][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.582884][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.582884][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 146.582884][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.582884][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.582884][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.582884][ C1] dummy_timer+0xda7/0x74f0 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 146.582884][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 146.582884][ C1] call_timer_fn+0x7d/0x450 [ 146.582884][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.582884][ C1] expire_timers+0x328/0x6c0 [ 146.582884][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 146.582884][ C1] __run_timers+0x624/0x9e0 [ 146.582884][ C1] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 146.582884][ C1] ? irqtime_account_irq+0x5e/0x380 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 146.582884][ C1] run_timer_softirq+0x2d/0x50 [ 146.582884][ C1] __do_softirq+0x1b9/0x715 [ 146.582884][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.582884][ C1] __irq_exit_rcu+0x22f/0x280 [ 146.582884][ C1] irq_exit_rcu+0xe/0x10 [ 146.582884][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 146.582884][ C1] [ 146.582884][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 146.582884][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 146.582884][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 146.582884][ C1] RSP: 0018:ffff888101be3c40 EFLAGS: 00000246 [ 146.582884][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017d9f40 [ 146.582884][ C1] RDX: ffff888101bd9f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.582884][ C1] RBP: ffff888101be3cd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 146.582884][ C1] R10: 0000000000000002 R11: ffff888101bd9f40 R12: 0000000000000000 [ 146.582884][ C1] R13: ffff888104afe064 R14: 0000000000000000 R15: ffff888101bda9c8 [ 146.582884][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 146.582884][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 146.582884][ C1] cpuidle_enter_state+0x99e/0x1750 [ 146.582884][ C1] cpuidle_enter+0xe3/0x170 [ 146.582884][ C1] do_idle+0x5df/0x790 [ 146.582884][ C1] cpu_startup_entry+0x45/0x50 [ 146.582884][ C1] ? setup_APIC_timer+0x210/0x210 [ 146.582884][ C1] start_secondary+0xe9/0xf0 [ 146.582884][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 146.582884][ C1] [ 146.582884][ C1] Uninit was created at: [ 146.582884][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 146.582884][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 146.582884][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 146.582884][ C1] __alloc_skb+0x4dd/0xe90 [ 146.582884][ C1] __netdev_alloc_skb+0x45d/0x810 [ 146.582884][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 146.582884][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.582884][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.582884][ C1] dummy_timer+0xda7/0x74f0 [ 146.582884][ C1] call_timer_fn+0x7d/0x450 [ 146.582884][ C1] expire_timers+0x328/0x6c0 [ 146.582884][ C1] __run_timers+0x624/0x9e0 [ 146.582884][ C1] run_timer_softirq+0x2d/0x50 [ 146.582884][ C1] __do_softirq+0x1b9/0x715 [ 146.582884][ C1] ===================================================== [ 146.582884][ C1] ===================================================== [ 146.582884][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x80c/0x1f60 [ 146.582884][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 146.582884][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.582884][ C1] Call Trace: [ 146.582884][ C1] [ 146.582884][ C1] dump_stack+0x24c/0x2e0 [ 146.582884][ C1] kmsan_report+0xfb/0x1e0 [ 146.582884][ C1] __msan_warning+0x5c/0xa0 [ 146.582884][ C1] ath9k_htc_rx_msg+0x80c/0x1f60 [ 146.582884][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 146.582884][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 146.582884][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.582884][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.582884][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 146.582884][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.582884][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.582884][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.582884][ C1] dummy_timer+0xda7/0x74f0 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 146.582884][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 146.582884][ C1] call_timer_fn+0x7d/0x450 [ 146.582884][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.582884][ C1] expire_timers+0x328/0x6c0 [ 146.582884][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 146.582884][ C1] __run_timers+0x624/0x9e0 [ 146.582884][ C1] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 146.582884][ C1] ? irqtime_account_irq+0x5e/0x380 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 146.582884][ C1] run_timer_softirq+0x2d/0x50 [ 146.582884][ C1] __do_softirq+0x1b9/0x715 [ 146.582884][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.582884][ C1] __irq_exit_rcu+0x22f/0x280 [ 146.582884][ C1] irq_exit_rcu+0xe/0x10 [ 146.582884][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 146.582884][ C1] [ 146.582884][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 146.582884][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 146.582884][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 146.582884][ C1] RSP: 0018:ffff888101be3c40 EFLAGS: 00000246 [ 146.582884][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017d9f40 [ 146.582884][ C1] RDX: ffff888101bd9f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.582884][ C1] RBP: ffff888101be3cd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 146.582884][ C1] R10: 0000000000000002 R11: ffff888101bd9f40 R12: 0000000000000000 [ 146.582884][ C1] R13: ffff888104afe064 R14: 0000000000000000 R15: ffff888101bda9c8 [ 146.582884][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 146.582884][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 146.582884][ C1] cpuidle_enter_state+0x99e/0x1750 [ 146.582884][ C1] cpuidle_enter+0xe3/0x170 [ 146.582884][ C1] do_idle+0x5df/0x790 [ 146.582884][ C1] cpu_startup_entry+0x45/0x50 [ 146.582884][ C1] ? setup_APIC_timer+0x210/0x210 [ 146.582884][ C1] start_secondary+0xe9/0xf0 [ 146.582884][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 146.582884][ C1] [ 146.582884][ C1] Uninit was created at: [ 146.582884][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 146.582884][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 146.582884][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 146.582884][ C1] __alloc_skb+0x4dd/0xe90 [ 146.582884][ C1] __netdev_alloc_skb+0x45d/0x810 [ 146.582884][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 146.582884][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.582884][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.582884][ C1] dummy_timer+0xda7/0x74f0 [ 146.582884][ C1] call_timer_fn+0x7d/0x450 [ 146.582884][ C1] expire_timers+0x328/0x6c0 [ 146.582884][ C1] __run_timers+0x624/0x9e0 [ 146.582884][ C1] run_timer_softirq+0x2d/0x50 [ 146.582884][ C1] __do_softirq+0x1b9/0x715 [ 146.582884][ C1] ===================================================== [ 146.582884][ C1] ===================================================== [ 146.582884][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x96f/0x1f60 [ 146.582884][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 146.582884][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.582884][ C1] Call Trace: [ 146.582884][ C1] [ 146.582884][ C1] dump_stack+0x24c/0x2e0 [ 146.582884][ C1] kmsan_report+0xfb/0x1e0 [ 146.582884][ C1] __msan_warning+0x5c/0xa0 [ 146.582884][ C1] ath9k_htc_rx_msg+0x96f/0x1f60 [ 146.582884][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 146.582884][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 146.582884][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.582884][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.582884][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 146.582884][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.582884][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.582884][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.582884][ C1] dummy_timer+0xda7/0x74f0 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 146.582884][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 146.582884][ C1] call_timer_fn+0x7d/0x450 [ 146.582884][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.582884][ C1] expire_timers+0x328/0x6c0 [ 146.582884][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 146.582884][ C1] __run_timers+0x624/0x9e0 [ 146.582884][ C1] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 146.582884][ C1] ? irqtime_account_irq+0x5e/0x380 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 146.582884][ C1] run_timer_softirq+0x2d/0x50 [ 146.582884][ C1] __do_softirq+0x1b9/0x715 [ 146.582884][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.582884][ C1] __irq_exit_rcu+0x22f/0x280 [ 146.582884][ C1] irq_exit_rcu+0xe/0x10 [ 146.582884][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 146.582884][ C1] [ 146.582884][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 146.582884][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 146.582884][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 146.582884][ C1] RSP: 0018:ffff888101be3c40 EFLAGS: 00000246 [ 146.582884][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017d9f40 [ 146.582884][ C1] RDX: ffff888101bd9f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.582884][ C1] RBP: ffff888101be3cd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 146.582884][ C1] R10: 0000000000000002 R11: ffff888101bd9f40 R12: 0000000000000000 [ 146.582884][ C1] R13: ffff888104afe064 R14: 0000000000000000 R15: ffff888101bda9c8 [ 146.582884][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 146.582884][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 146.582884][ C1] cpuidle_enter_state+0x99e/0x1750 [ 146.582884][ C1] cpuidle_enter+0xe3/0x170 [ 146.582884][ C1] do_idle+0x5df/0x790 [ 146.582884][ C1] cpu_startup_entry+0x45/0x50 [ 146.582884][ C1] ? setup_APIC_timer+0x210/0x210 [ 146.582884][ C1] start_secondary+0xe9/0xf0 [ 146.582884][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 146.582884][ C1] [ 146.582884][ C1] Uninit was created at: [ 146.582884][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 146.582884][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 146.582884][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 146.582884][ C1] __alloc_skb+0x4dd/0xe90 [ 146.582884][ C1] __netdev_alloc_skb+0x45d/0x810 [ 146.582884][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 146.582884][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.582884][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.582884][ C1] dummy_timer+0xda7/0x74f0 [ 146.582884][ C1] call_timer_fn+0x7d/0x450 [ 146.582884][ C1] expire_timers+0x328/0x6c0 [ 146.582884][ C1] __run_timers+0x624/0x9e0 [ 146.582884][ C1] run_timer_softirq+0x2d/0x50 [ 146.582884][ C1] __do_softirq+0x1b9/0x715 [ 146.582884][ C1] ===================================================== [ 146.582884][ C1] ===================================================== [ 146.582884][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x28c/0x1f60 [ 146.582884][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 146.582884][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.582884][ C1] Call Trace: [ 146.582884][ C1] [ 146.582884][ C1] dump_stack+0x24c/0x2e0 [ 146.582884][ C1] kmsan_report+0xfb/0x1e0 [ 146.582884][ C1] __msan_warning+0x5c/0xa0 [ 146.582884][ C1] ath9k_htc_rx_msg+0x28c/0x1f60 [ 146.582884][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 146.582884][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 146.582884][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.582884][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.582884][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 146.582884][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.582884][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.582884][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.582884][ C1] dummy_timer+0xda7/0x74f0 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 146.582884][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 146.582884][ C1] call_timer_fn+0x7d/0x450 [ 146.582884][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.582884][ C1] expire_timers+0x328/0x6c0 [ 146.582884][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 146.582884][ C1] __run_timers+0x624/0x9e0 [ 146.582884][ C1] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 146.582884][ C1] ? irqtime_account_irq+0x5e/0x380 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 146.582884][ C1] run_timer_softirq+0x2d/0x50 [ 146.582884][ C1] __do_softirq+0x1b9/0x715 [ 146.582884][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.582884][ C1] __irq_exit_rcu+0x22f/0x280 [ 146.582884][ C1] irq_exit_rcu+0xe/0x10 [ 146.582884][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 146.582884][ C1] [ 146.582884][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 146.582884][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 146.582884][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 146.582884][ C1] RSP: 0018:ffff888101be3c40 EFLAGS: 00000246 [ 146.582884][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017d9f40 [ 146.582884][ C1] RDX: ffff888101bd9f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.582884][ C1] RBP: ffff888101be3cd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 146.582884][ C1] R10: 0000000000000002 R11: ffff888101bd9f40 R12: 0000000000000000 [ 146.582884][ C1] R13: ffff888104afe064 R14: 0000000000000000 R15: ffff888101bda9c8 [ 146.582884][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 146.582884][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 146.582884][ C1] cpuidle_enter_state+0x99e/0x1750 [ 146.582884][ C1] cpuidle_enter+0xe3/0x170 [ 146.582884][ C1] do_idle+0x5df/0x790 [ 146.582884][ C1] cpu_startup_entry+0x45/0x50 [ 146.582884][ C1] ? setup_APIC_timer+0x210/0x210 [ 146.582884][ C1] start_secondary+0xe9/0xf0 [ 146.582884][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 146.582884][ C1] [ 146.582884][ C1] Uninit was created at: [ 146.582884][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 146.582884][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 146.582884][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 146.582884][ C1] __alloc_skb+0x4dd/0xe90 [ 146.582884][ C1] __netdev_alloc_skb+0x45d/0x810 [ 146.582884][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 146.582884][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.582884][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.582884][ C1] dummy_timer+0xda7/0x74f0 [ 146.582884][ C1] call_timer_fn+0x7d/0x450 [ 146.582884][ C1] expire_timers+0x328/0x6c0 [ 146.582884][ C1] __run_timers+0x624/0x9e0 [ 146.582884][ C1] run_timer_softirq+0x2d/0x50 [ 146.582884][ C1] __do_softirq+0x1b9/0x715 [ 146.582884][ C1] ===================================================== [ 146.582884][ C1] ===================================================== [ 146.582884][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x4c0/0x1f60 [ 146.582884][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 146.582884][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.582884][ C1] Call Trace: [ 146.582884][ C1] [ 146.582884][ C1] dump_stack+0x24c/0x2e0 [ 146.582884][ C1] kmsan_report+0xfb/0x1e0 [ 146.582884][ C1] __msan_warning+0x5c/0xa0 [ 146.582884][ C1] ath9k_htc_rx_msg+0x4c0/0x1f60 [ 146.582884][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 146.582884][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 146.582884][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.582884][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.582884][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 146.582884][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.582884][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.582884][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.582884][ C1] dummy_timer+0xda7/0x74f0 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 146.582884][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 146.582884][ C1] call_timer_fn+0x7d/0x450 [ 146.582884][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.582884][ C1] expire_timers+0x328/0x6c0 [ 146.582884][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 146.582884][ C1] __run_timers+0x624/0x9e0 [ 146.582884][ C1] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 146.582884][ C1] ? irqtime_account_irq+0x5e/0x380 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 146.582884][ C1] run_timer_softirq+0x2d/0x50 [ 146.582884][ C1] __do_softirq+0x1b9/0x715 [ 146.582884][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.582884][ C1] __irq_exit_rcu+0x22f/0x280 [ 146.582884][ C1] irq_exit_rcu+0xe/0x10 [ 146.582884][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 146.582884][ C1] [ 146.582884][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 146.582884][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 146.582884][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 146.582884][ C1] RSP: 0018:ffff888101be3c40 EFLAGS: 00000246 [ 146.582884][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017d9f40 [ 146.582884][ C1] RDX: ffff888101bd9f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.582884][ C1] RBP: ffff888101be3cd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 146.582884][ C1] R10: 0000000000000002 R11: ffff888101bd9f40 R12: 0000000000000000 [ 146.582884][ C1] R13: ffff888104afe064 R14: 0000000000000000 R15: ffff888101bda9c8 [ 146.582884][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 146.582884][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 146.582884][ C1] cpuidle_enter_state+0x99e/0x1750 [ 146.582884][ C1] cpuidle_enter+0xe3/0x170 [ 146.582884][ C1] do_idle+0x5df/0x790 [ 146.582884][ C1] cpu_startup_entry+0x45/0x50 [ 146.582884][ C1] ? setup_APIC_timer+0x210/0x210 [ 146.582884][ C1] start_secondary+0xe9/0xf0 [ 146.582884][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 146.582884][ C1] [ 146.582884][ C1] Uninit was created at: [ 146.582884][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 146.582884][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 146.582884][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 146.582884][ C1] __alloc_skb+0x4dd/0xe90 [ 146.582884][ C1] __netdev_alloc_skb+0x45d/0x810 [ 146.582884][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 146.582884][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.582884][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.582884][ C1] dummy_timer+0xda7/0x74f0 [ 146.582884][ C1] call_timer_fn+0x7d/0x450 [ 146.582884][ C1] expire_timers+0x328/0x6c0 [ 146.582884][ C1] __run_timers+0x624/0x9e0 [ 146.582884][ C1] run_timer_softirq+0x2d/0x50 [ 146.582884][ C1] __do_softirq+0x1b9/0x715 [ 146.582884][ C1] ===================================================== [ 146.582884][ C1] ===================================================== [ 146.582884][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x7b8/0x1f60 [ 146.582884][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 146.582884][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.582884][ C1] Call Trace: [ 146.582884][ C1] [ 146.582884][ C1] dump_stack+0x24c/0x2e0 [ 146.582884][ C1] kmsan_report+0xfb/0x1e0 [ 146.582884][ C1] __msan_warning+0x5c/0xa0 [ 146.582884][ C1] ath9k_htc_rx_msg+0x7b8/0x1f60 [ 146.582884][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 146.582884][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 146.582884][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.582884][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.582884][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 146.582884][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.582884][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.582884][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.582884][ C1] dummy_timer+0xda7/0x74f0 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 146.582884][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 146.582884][ C1] call_timer_fn+0x7d/0x450 [ 146.582884][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.582884][ C1] expire_timers+0x328/0x6c0 [ 146.582884][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 146.582884][ C1] __run_timers+0x624/0x9e0 [ 146.582884][ C1] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 146.582884][ C1] ? irqtime_account_irq+0x5e/0x380 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 146.582884][ C1] run_timer_softirq+0x2d/0x50 [ 146.582884][ C1] __do_softirq+0x1b9/0x715 [ 146.582884][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.582884][ C1] __irq_exit_rcu+0x22f/0x280 [ 146.582884][ C1] irq_exit_rcu+0xe/0x10 [ 146.582884][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 146.582884][ C1] [ 146.582884][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 146.582884][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 146.582884][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 146.582884][ C1] RSP: 0018:ffff888101be3c40 EFLAGS: 00000246 [ 146.582884][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017d9f40 [ 146.582884][ C1] RDX: ffff888101bd9f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.582884][ C1] RBP: ffff888101be3cd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 146.582884][ C1] R10: 0000000000000002 R11: ffff888101bd9f40 R12: 0000000000000000 [ 146.582884][ C1] R13: ffff888104afe064 R14: 0000000000000000 R15: ffff888101bda9c8 [ 146.582884][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 146.582884][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 146.582884][ C1] cpuidle_enter_state+0x99e/0x1750 [ 146.582884][ C1] cpuidle_enter+0xe3/0x170 [ 146.582884][ C1] do_idle+0x5df/0x790 [ 146.582884][ C1] cpu_startup_entry+0x45/0x50 [ 146.582884][ C1] ? setup_APIC_timer+0x210/0x210 [ 146.582884][ C1] start_secondary+0xe9/0xf0 [ 146.582884][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 146.582884][ C1] [ 146.582884][ C1] Uninit was created at: [ 146.582884][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 146.582884][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 146.582884][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 146.582884][ C1] __alloc_skb+0x4dd/0xe90 [ 146.582884][ C1] __netdev_alloc_skb+0x45d/0x810 [ 146.582884][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 146.582884][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.582884][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.582884][ C1] dummy_timer+0xda7/0x74f0 [ 146.582884][ C1] call_timer_fn+0x7d/0x450 [ 146.582884][ C1] expire_timers+0x328/0x6c0 [ 146.582884][ C1] __run_timers+0x624/0x9e0 [ 146.582884][ C1] run_timer_softirq+0x2d/0x50 [ 146.582884][ C1] __do_softirq+0x1b9/0x715 [ 146.582884][ C1] ===================================================== [ 146.582884][ C1] ===================================================== [ 146.582884][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x80c/0x1f60 [ 146.582884][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 146.582884][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.582884][ C1] Call Trace: [ 146.582884][ C1] [ 146.582884][ C1] dump_stack+0x24c/0x2e0 [ 146.582884][ C1] kmsan_report+0xfb/0x1e0 [ 146.582884][ C1] __msan_warning+0x5c/0xa0 [ 146.582884][ C1] ath9k_htc_rx_msg+0x80c/0x1f60 [ 146.582884][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 146.582884][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 146.582884][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.582884][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.582884][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 146.582884][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.582884][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.582884][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.582884][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0